CVE-2025-21963

cifs: Fix integer overflow while processing acdirmax mount option

Medium · published April 1, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix integer overflow while processing acdirmax mount option

User-provided mount parameter acdirmax of type u32 is intended to have

an upper limit, but before it is validated, the value is converted from

seconds to jiffies which can lead to an integer overflow.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00203 · 9.7th percentile
Published
2025-04-01T15:46Z
EPSS history
Timeline
  • 01 APR 15:46Z
    cifs: Fix integer overflow while processing acdirmax mount option
    cvelistv5